Medium severity6.0NVD Advisory· Published Jun 22, 2026· Updated Jun 30, 2026

CVE-2025-2669

Description

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 could allow a privileged user to perform operations and obtain sensitive information outside of their authority due to improper token validation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Db2
cpe:2.3:a:ibm:db2:*:*:*:*:*:*:*:*
Range: >=4.8,<5.4
IBM/Db2 Warehouse
cpe:2.3:a:ibm:db2_warehouse:*:*:*:*:*:*:*:*
Range: >=4.8,<5.4
IBM/Db2 On Cloud Pak For Datallm-fuzzy
Range: 4.8, 5.0, 5.1, 5.2, 5.3
IBM/Db2 Warehouse On Cloud Pak For Datallm-fuzzy
Range: 4.8, 5.0, 5.1, 5.2, 5.3

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/7277112nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.390
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000